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DETAILED ACTION 

1 . Claims 54-74 have been examined. 

Response to Amendment 

2. The Amendment filed on 8/8/08 is insufficient to overcome the prior rejection. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed 
or described as set forth in section 102 of this title, if the differences between the 
subject matter sought to be patented and the prior art are such that the subject 
matter as a whole would have been obvious at the time the invention was made 
to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was 
made. 

3. Claims 54-74 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Bezos (6,029,141) in view of Messer (2004/0230491) in view of Dane (20040215623). 

Claims 54, 59, 60, 62, 64, 65, 66, 67, 72, 74: 

Examiner notes that Applicant's claims concerning the data interface, data 
interface provider, and content provider are read in light of Applicant's Specification 
(Paragraphs [36, 45, 37, 40]). 

Bezos discloses combining predetermined Content, an Interface Provider 
Identification Code, and a Dynamically-Generated User Identification Code to Form a 
Data Interface, Providing the Data Interface to a User System, and Receiving a Request 
for Selected Content that is Formed by Combining the Interface Provider Identification 
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Code and the User Identification Code (Fig. 8; col 15, lines 5-16; col 17, lines 10-29; col 
8, lines 1 6-31 ; col 1 3, lines 41-54; col 1 4, lines 1-11). 

Note that Bezos discloses that the advertiser can use any of the predetermined 
content available from merchant (Amazon) website. And, note that the advertiser 
presents predetermined content that also includes a link with an advertiser identifier as 
well as a user identifier. 

Bezos further discloses that the url can include data interface provider 
identification and unique customer identification (Fig. 8). Bezos discloses that the 
unique customer id can be generated or added to the URL upon the user selecting a 
referral link (see above citations). 

Bezos does not explicitly disclose that the original referral link can include the 
unique customer ID before selection. 

However, Bezos discloses that the unique customer id can be generated or 
added to the URL upon the user selecting a referral link. And, Bezos discloses that the 
unique user id can be made a part of the advertising content that is presented to the 
user as the user shops (Fig. 8 and above citations). And, Bezos discloses that the 
unique customer ID can be part of the URL for subsequent activity (see above citations) 
even if the user remains on the original advertiser webpage (col 12, lines 27-41). And, 
MPEP 21 44.04. IV.C discloses that changing the sequence is obvious and MPEP 
21 44. 04 .VI discloses that reversal or rearranging of parts is obvious. And, Bezos 
discloses that the unique user id can be used for tracking and targeting a user (Fig. 1 , 
item 160). 



Application/Control Number: 09/821 ,259 Page 4 

Art Unit: 3622 

Therefore, it would have been obvious to one having ordinary skill in the art at 
the time the invention was made that Bezos placing the user id in the URL along with 
the presented advertising information can occur before or after selecting the advertising 
link. One would have been motivated to do this in order to allow relevant 
targeting/tracking information on a user to be utilized by the associate/advertiser as well 
as the merchant or because changing the sequence or reversal or rearranging of parts 
is an obvious modification. 

While Bezos discloses tracking requests for information, Bezos does not 
explicitly disclose tracking invalid requests for information. 

However, Messer discloses tracking and auditing user requests for information: 
"[0004] It is an object of the present invention to provide a data processing 
system for tracking, managing, and auditing select transactions between a 
plurality of computer workstations interconnected via a common network. 

[0013] In order to accomplish these and other objects, the present invention 
includes a data processing system designed and configured to operate on one or 
more servers interconnected for communication. The data processing system 
includes a Clearinghouse server programmed to track, manage, and audit 
associated transactions of Users clicking-through an Content Provider web site 
and purchasing a product or service from a Merchant. The Clearinghouse server 
is also programmed to track and report on the level of activity associated with 
the Users and produce, on a periodic basis, accounting statements for the 
participants directed to the transactions that have transpired during the 
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defined period". 

Messer further discloses tracking both valid and invalid information requests in 
order to improve commerce on the web: 

"[0002]. . .More specifically, the present invention relates to a referral 
tracking and control system for promoting goods and services on a wide area, 
public or private access network, such as the Internet . 

[0003] As discussed in more detail in the above-referenced parent cases, the 
present invention includes the ability to track select USER activity while on 
the Web including interactions with Web pages and click-through navigation to 
select Web sites where purchases can be executed. Notwithstanding these 
advancements and advantages, commerce on the web can still be improved upon. 
Recognizing some of the current difficulties in implementing affiliate programs 
has led to the innovations presented herein. 

[Abstract] An improved processing system for tracking commerce on the Internet 
provides for subvariable processing and includes web page scanning to discern fraud 
or 

improper content to insure proper promotion of select products within the 
network environment" (Abstract). 

Messer further discloses determining invalid requests for information and tracking 
invalid requests for information, and utilizing a database and reporting for invalid 
requests for information: 

"[0006] It is still another object of the present invention to provide a vehicle 
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for the detection of affiliate sponsored fraud : exemplary fraud of concern 
includes use of a process that employs a Javascript to artificially multiply 
the number of clicks, impressions and/or sales on a banner or similar 
promotional piece. 

[0026]. . .In its preferred embodiments, the server is configured with a UNIX 
operating system. Database management software utilizing Oracle. RTM. on an 
Apache. RTM. 

Webserver is configured for the specific operating system environment. As 
discussed below, the Clearinghouse is further equipped to deter fraud and other 
non-productive activity. 

[0036] Turning now to FIG. 2, a high level flow chart depicts the programming 
logic for detecting click fraud . Logic begins at start block 200 and the 
system at block 210, pulls and enters the next web page in sequence. With the 
large number of affiliate web pages makes a sequential review perhaps too 
involve. Accordingly, the system may use a number of sampling techniques, that 
provide some policing capability. In this way, counter variable I increments 
the sampled pages and sends these to the scanning program block 220. 

[0037] . . . If this test is also positive, the system generates a report, positively 
identifying the page as a potential source of click fraud., block 250. Logic then 
continues at 260. 

[0038] In addition to the Javascript detection algorithm, the system further tracks 
potential click fraud by assessing historical patterns of commerce. For example, if a 
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click-through includes the same ID, the system measures the interval between 
successive clicks. A relatively fast click speed, or multiple clicks at a uniform interval 
reflects the possibility that the click is machine generated and potentially fraudulent . 
Other patterns may give further details, 
such as large jumps in traffic from individual sites. 

[0039] For large scale burst traffic generated from a single or a grouped IP 
address, within a short interval, the apache server of the Clearinghouse is programmed 
to block such traffic from hitting the database of the ad servers, thus defending the 
Clearinghouse server from certain types of DOS (denial of service) attacks. Based on 
these types of detected activity, the system will create a report and trigger further and 
more comprehensive evaluations". 

Therefore, it would have been obvious to one having ordinary skill in the art at 
the time the invention was made to add Messer's auditing both valid and invalid 
requests for information to Bezos' auditing requests for information. One would have 
been motivated to do this in order to provide prevent fraud, provide better auditing and 
tracking of information requests, and to provide better commerce on the web. 

Additionally, the following is in regards to id expiration. Bezos discloses a 
shopping cart identifier that can be used to identify a user/computer system (col 8, lines 
25-31 ; col 1 3, lines 29-41 ; col 1 4, lines 51 -61 ) and that the identifier can expire at a set 
time period (col 2, lines 47-65; col 13, lines 29-41; col 14, lines 51-61). Therefore, 
Bezos discloses an identifier that expires. 
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Therefore, it would have been obvious to one having ordinary skill in the art at 
the time the invention was made that Bezos user id can expire. One would have been 
motivated to do this in order to prevent the use of outdated user identifiers. 

Additionally, the following is in regards to encryption. 

Bezos does not explicitly disclose utilizing different encryption standards for 
secure communications. 

However, Messer further discloses utilizing encryption ([32, 33]). 

Therefore, it would have been obvious to one having ordinary skill in the art at 
the time the invention was made to add Messer's utilization of encryption to the prior 
art's secure communications. One would have been motivated to do this in order to 
provide standard and readily available technical capabilities for secure communications. 

Additionally, Bezos does not explicitly disclose identifying an incoming data 
request as being associated with a SPAM electronic mail message. 

However, Examiner notes that Messer discloses preventing Internet fraud and 
click fraud related to advertising (Abstract; [6, 14, 36, 37, 38]). 

And, Examiner notes that Applicant's Specification states that data requests 
being associated with a SPAM electronic mail message and click fraud were old and 
well known in the art (Applicant's Specification [9, 10, 11, 12]). Hence, the Applicant's 
Specification states that it was old and well known that click fraud can occur from a URL 
on a webpage or from a URL in an email or from a URL in a SPAM type email. 

Therefore, it would have been obvious to one having ordinary skill in the art at 
the time the invention was made that the combination of the prior art and Messer's 
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identifying click fraud can be applied to websites, emails, SPAM emails. One would 
have been motivated to do this in order to better identify click fraud. 

Additionally, Bezos does not explicitly disclose presenting a dead page to the 
computer system, the dead page stating that the hyperlink was fraudulently generated. 

Examiner notes that Applicant's "dead page" is minimally discussed and 
minimally mentioned in the Applicant's Specification. Examiner could only find one 
mention of the term "dead page". In the Summary of the Invention in Paragraph [16], 
Applicant states, "Additionally, in some embodiments, the user is presented a 'dead 
page' stating that the link was generated fraudulently." (Applicant's Specification, [16]). 

However, Messer discloses extensive tracking, reporting, and alerting associated 
with invalid/fraudulent hyperlink use. And, Dane discloses that if a URL is found to be 
fraudulent then the system will record as much information as is available about the 
attempted fraudulent access to identify an individual or individuals who is attempting to 
improperly access the data. And Dane discloses that, because the access has been 
determined to be fraudulent, the URL would be directed to a message indicating that 
access has been denied (Dane, [67]). 

Therefore, it would have been obvious to one having ordinary skill in the art at 
the time the invention was made that fraudulent/invalid URL requests can be returned 
with a message alerting the user that the request will not be honored. One would have 
been motivated to do this in order to better discourage fraudulent/invalid requests. 

Claim 55: Bezos further discloses receiving the request for data at the merchant 
system (Fig . 1). 
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Claim 56: Messer further discloses utilizing standard encryption protocols ([32, 
33]). Hence, it would be obvious that other or a variety of available and standard 
encryption protocols can be used. One would be motivated to do this to better offer 
secure data and to take advantage of commonly available encryption standards. 

Claim 57: Bezos further discloses utilizing cookies and IP addresses (col 4, lines 
50-55; col 5, lines 55-60). 

Claim 58: Bezos further discloses generating interest (Figure 1; col 1, lines 50- 

60). 

Claim 61,71: Bezos further discloses providing advertising (col 1 , lines 36-44). 

Claim 63, 73: Bezos further discloses providing remuneration (Abstract). 

Claim 68: Bezos further discloses providing supporting communication systems 
(Figures 1, 2, 4, 5). 

Claim 69: Bezos further discloses utilizing networks (Figures 1, 2, 4, 5) 

Claim 70: Dane ([81, 82, 90]) discloses utilizing wireless communications. Also, 
the MPEP discloses that making something portable or separable is an obvious 
variation (MPEP 21 44. 04 .V). Hence, it is obvious that Bezos can utilize wireless 
communications with Internet communications. 

Response to Arguments 

4. Applicant's arguments with respect to claims have been considered but are not 
found persuasive. 

On page 1 1 of the Appellant's Remarks dated 8/8/08, Appellant states: 
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"None of the above references, neither individually nor in combination, disclose 
or even suggest authenticating a request for data content from a computer system by 
comparing the computer identification code with the computer identification data, 
wherein the computer identification code uniquely identifies the computer system and 
the computer identification data includes current information for identifying the computer 
system." 

However, Bezos discloses identifying the user computer and comparing the user 
computer identification to other computer identifying information to determine which 
computer this is and whether it is a known or new computer: 

" Cookies . A technology that enables a Web server to retrieve information 
from a user's computer that reveals prior browsing activities of the user. The 
informational item stored on the user's computer (typically on the hard drive) 
is commonly referred to as a " cookie. " Many standard Web browsers support the 
use of cookies , (col 5, lines 55-60) 

Because the identity of the customer is normally unknown to the merchant Web 
site 106 at the time of the referral event, the site 106 uses cookies 
technology to identify the customer, so that the customer can be associated 
with any existing shopping cart created during previous visits to the site 106. 
This process involves retrieving the cookie 140 from the customer computer 108 
with the Web server 132, and then executing a computer program 144 that 
compares the cookie against information stored in a customer data structure 
148. If no shopping cart exists for the customer, or if no cookie exists on 
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the customer computer 108, a shopping cart structure is created for the user. 
Any of a variety of alternative techniques can be used to identify the 
customer, including prompting the customer for a user ID, and/or using URL 
information returned by the customer's Web browser, (col 8, lines 15-31) 

Upon customer selection of a referral link, the computer program 144 
utilizes the customer cookie information 140 passed through an HTTP call to 
determine whether the particular customer (or technically, the customer 
computer 108) already has an open shopping cart (event E2). As part of this 
process, the computer program 144 executes cookie processing software (FIG. 1), 
which assigns a unique customer ID to the customer based on the cookie 
information 140. If the customer's Web browser 112 does not support the use of 
cookies (or if the cookies feature is disabled) the program 144 uses URL 
information received from the Web browser to generate the customer ID. 

The customer ID is in turn used by the software 144 to identify any shopping 
cart currently associated with the customer. If no shopping cart exists for 
the customer, a new shopping cart structure (which includes the customer ID) is 
generated within the shopping cart database 152. The customer ID is also 
stored in a customer database 148. The algorithm used by the program 144 to 
generate the customer IDs is such that a cookie retrieved from the same 
customer computer will consistently produce the same customer ID. Thus, 
assuming the customer always uses the same computer to access the merchant site 
1 06, and that the browser 1 1 2 supports the use of cookies, the customer will be 
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assigned the same customer ID, and will be associated with any existing 
shopping cart. 

In one implementation, once the customer has been referred to the merchant 
site 1 06 and the customer ID has been determined, the merchant site dynamically 
includes this ID within hyperlinks of the detail page and other Web pages that 
are sent to the customer computer 108. When the customer subsequently selects 
such a link (such as to add a selected product to the shopping cart), the 
customer ID is automatically transmitted to the merchant site 106 as part of 
the HTTP message. This allows the merchant site 106 to identify the customer 
(and shopping cart) without the need to re-request the cookie from the customer 
computer , (col 13, line 40-col 14, line 10) 

The URL (shown at the top of FIG. 8) comprises the unique customer ID 800 
(obtained from the customer's cookie or URL information), the product ID 802 
(shown as the ISBN of the Terrain Skiing book), the store ID 804 (shown as the 
"skinet" Web site), and the associate commission ID 806 (the letter "A"). Once 
the customer has reviewed the product detail page 136, the customer can select 
the "Add it to your Shopping Cart" hyperlink 808. When the customer clicks on 
this hyperlink 808, the merchant Web server 132 returns a dynamically-generated 
HTML document that displays the contents of the shopping cart", (col 1 5, lines 5-1 5). 

Also, note in the citations above that the cookie is disclosed to identifying the 
customer computer, " , the computer program 144 utilizes the customer cookie 
information 140 passed through an HTTP call to determine whether the particular 
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customer (or technically, the customer computer 108) ". Also, note in the citations 
above that the computer ID is associated with the cookie, " The algorithm used by the 
program 144 to generate the customer IDs is such that a cookie retrieved from the 
same customer computer will consistently produce the same customer ID. Thus, 
assuming the customer always uses the same computer to access the merchant site 
1 06, and that the browser 1 1 2 supports the use of cookies, the customer will be 
assigned the same customer ID, and will be associated with any existing 
shopping cart. " And, note that the computer ID is dynamically included. And, note that 
the ID is used for comparison and verification purposes. 

Hence, Bezos discloses authenticating a request for data content from a 
computer system by comparing the computer identification code with the computer 
identification data, wherein the computer identification code uniquely identifies the 
computer system and the computer identification data includes current information for 
identifying the computer system. 

Also, note that Messer also discloses both cookie and IP address utilization in 
order to verify the identify of a computer: 

"[13]... The Clearinghouse server is further programmed to incorporate 
the use of select tagging of information to permit tracking of web site 
visitors and for tracking and recording the specific transactions under 
scrutiny. The identifier typically includes a select coded data and may take 
the form of a " cookie " (or similar tracking device ) that is inserted onto the 
User's hard disk memory during access to the link. The Clearinghouse server is 



Application/Control Number: 09/821 ,259 Page 1 5 

Art Unit: 3622 

further programmed to provide a platform for Merchants and Content Providers to 
efficiently reach terms on their joint promotional and commercial efforts, and 
for each, to internally monitor these relationships. 

[0025] The banner ad is linked, first in a seamless fashion to the 
Clearinghouse server, block 130. The link then continues directly to the 
Merchant block 140 (as shown by inner path in FIG. 1). During-the linking 
process, the USER has an identifier string appended to the HTTP entry, and 
possibly a " cookie " placed on their system. These act as a marker to permit 
tracking of the USER by the Clearinghouse, to determine if and when the USER 
was involved in a purchase, and if to allocate a purchase commission to the 
Affiliate. The identifier used with select Affiliates include data fields for 
use to track select information such as a commission vector, i.e., a magnitude 
and direction for commission dollars generated by that USER'S commerce activity 
on the Web. 

[37]... However, these clicks would have telltale signs, such as originating from 
the same IP address , 

[0038] In addition to the Javascript detection algorithm, the system further 
tracks potential click fraud by assessing historical patterns of commerce. For 
example, if a click-through includes the same ID , the system measures the 
interval between successive clicks." 

Hence, the combination of the prior art also renders obvious the Applicant's 
features. 
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Hence, the Applicant's features are rendered obvious by the prior art. 



Conclusion 

The following prior art made of record and not relied upon is considered pertinent 
to applicant's disclosure: 

a) Johnson (5,813,009) discloses storing invalid requests for information in a 
database (Fig. 1b; Fig. 3; Fig. 7; Fig. 6; and below): 

"(1 24) If the request for information is rejected during the card/terminal 
operation, the access card holder will receive a "Not Authorized" message, and 
the invalid access attempt will be updated on the access card database . If a 
sufficient number of invalid access attempts are made using any single card, 
the card will also be invalidated for access until a revalidation routine is 
performed on the card by an authorized agency. 

(1 34) Information requests not within the card bearer's authority will 
receive a "not authorized" message and the invalid access attempt will be 
updated (block 39) to card database 38"; 



b) Callaghan (5,737,523) discloses storing invalid requests for information in a 
database: 

"(25) In some implementations, the NFS server 200 may respond to in authentic 
NFS clients with more severe security measures. By way of example, the NFS 
server 200 may record in a file and/or on a system terminal that an 
unauthenticated NFS request 22 was received from NFS client 12. Depending upon 
the circumstances, the NFS server 200 may determine that the NFS client 12 is 
attacking and preclude the NFS client 12 from making further NFS requests. One 
embodiment of step 436 will be described below in more detail with reference to 
FIG. 10. 

(28) Once the export information table 222 has been searched in step 454, a 
step 456 determines whether the given file system 30 was found in the export 
information table 222. The given file system 30 is only present in the export 
information table 222 when the NFS server 200 is making the given file system 
30 accessible for sharing. When the given file system 30 is not found in 
search step 454, control is passed to a step 458 which returns an error message 
to the NFS client 12. In some embodiments of the present invention, additional 
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or different security measures may be performed. As described above with 
reference to FIG. 9, these include logging a message on the system terminal, 
maintaining a file record of unauthenticated client requests, and/or precluding 
operation of future NFS requests by the NFS client 12"; 

c) Pines (2005/0143064) discloses storing invalid requests for information in a 
database: 

"[01 19] As illustrated in FIG. 5D, those requested changes which cannot be 
implemented are stored in Rejected Updated Listings Tables 52D along with a 
reason for the rejection, for example, that the user is an invalid user, and/or 
that the requested changes is a duplicate, and the like"; 

d) Wagener (5,793,028) discloses storing invalid requests for information in a database. 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Arthur Duran whose telephone number is (571)272- 
6718. The examiner can normally be reached on Mon- Fri, 8:00-4:30. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Eric Stamber can be reached on (571) 272-6724. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Arthur Duran 
Primary Examiner 
Art Unit 3622 

/Arthur Duran/ 

Primary Examiner, Art Unit 3622 
9/29/2008 



